Which statement describes best practice for handling confidential information?

• A. Do not use email for high sensitive or confidential information.
• B. Do not share passwords via email.
• C. Email data should be posted publicly.
• D. Encrypt all email attachments automatically.

Answer: (A)

Handling confidential information securely starts with using communication methods that keep data from being exposed. Email, by its nature, travels through multiple servers, can be misaddressed, forwarded to unintended recipients, or stored on devices outside your control, making it easy for sensitive details to leak. Because of that, the best practice is to avoid using email for high sensitive or confidential information and instead use secure channels such as encrypted file transfers, secure messaging, or access-controlled portals. This approach reduces the risk of exposure and gives you better control and auditability over who can access the data.

The other statements touch on valid security habits, but they don’t address the overarching safeguard. Not sharing passwords via email is prudent, yet it’s only one aspect of security. Encrypting all email attachments helps when properly implemented, but it depends on configuration and doesn't guarantee confidentiality if the email itself isn’t protected. Posting email data publicly would violate confidentiality and is not acceptable.